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Hitless Protection Switching 

The invention is based on a priority application EP 0329091 1.1 which is 
hereby incorporated by reference. 

Field of the Invention 

The present invention relates to the field of telecommunication and more 
particularly to a method and corresponding apparatus for switching in a 
telecommunications equipment between an active and a redundant signal in a 
hitless manner, i.e., without corrupting data transmitted by the active and 
redundant signal. 

Background of the Invention 

In telecommunications networks, reliability and failure resistance is a primary 
issue and telecommunications equipment shall ensure continued operation 
even in the case any equipment component fails. Therefore, network elements 
are provided with equipment protection, which means that core components 
are provided twice so that a redundant system component can take over 
operation of a failed system component. 

Typical network elements of a transmission network such as crossconnects and 
add/drop multiplexers have a switching matrix for randomly connecting 
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signals from any input to any output. This switching matrix (referred to as copy 
A) is typically protected by a redundant second matrix (referred to as copy B). 

The principle of equipment protection is that all signals are duplicated and 
distributed to the active and the redundant standby equipment component, 
which both perform the identical operation on the signal. On the output side, 
the two signals are combined again by selecting the better of the two for 
further processing. So, if the active component fails, the signal processed by 
the standby component is selected and the standby component thus becomes 
active. 

However, loss of signal detection may take some time, during which a bit error 
burst is transmitted before the protection switch is activated. This situation 
results in a "hit" in the output signal and it is thus desirable to perform hitless 
protection switching, i.e., to switch from active to standby signal before a 
disruption in the active signal may reach the output. 

Known hitless protection switch systems have a large buffer for synchronization 
of the data signals. This buffer allows to base the loss of signal detection on a 
loss of frame event. Known failure detectors therefore need a long time 
(expressed in bit periods) to detect a failure condition and switch from active to 
standby signal. Moreover, a large buffer impacts the signal delay performance 
during normal operation and involves higher equipment cost and higher 
power dissipation. 

It is thus an object of the present invention to provide a hitless equipment 
protection system and method that does not require large buffers. 

European patent application EP 0 696 1 1 1 A2 describes a hitless path 
switching apparatus where the working and protection paths are continuously 
monitored for bit errors. If a bit error occurs in the working path and no bit 
error occurs in the protection path, switching from the working to the 
protection path is performed on data block basis. 
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European patent application EP 1 261 157 A2 describes hitless protection 
switching in a transmission system supporting virtual concatenation. The 
described apparatus receives data signals on at least two transmission paths 
and outputs data from a selected one of these paths. The received data 
signals are aligned first so that the selector mechanism can select between 
corresponding elements of the received data signals. This allows hitless 
switching to be performed since there is no loss or repetition of signal 
elements when switching occurs. 

German patent application DE 42 38 410 Al describes a communication and 
control system in a base station of a cellular network. All modules of the base 
station communicate over a common bus system. Two redundant bus systems 
are provided and all data communicated in parallel over both of them. Check 
bits are evaluated to select only valid data from the two busses. 

German patent application DE 39 29 793 Al describes duplex 
communication over redundant communication paths. In receive direction, the 
paths are monitored for the presence of a carrier signal. When no modulated 
carrier signal is received on the selected path, a modulated carrier is sent in 
reverse direction step by step on all paths. When a carrier signal is detected 
on one of the paths, this one is selected as active path. 

Summary of the Invention 

These and other objects that appear below are achieved by detecting signal 
transition in both copies of a protected signal and by switching from the active 
copy to the standby copy if the former does not show any signal transition any 
more but the latter does. 

In particular, a network element according to the present invention has first 
and second redundant signal paths for first and second redundant signals; a 
selector for selecting either of the two redundant signals as active; and first 
and second transition monitors coupled to the first and second signal paths, 
respectively, for monitoring the first and second signals for bit level transitions. 
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The selector is controlled by the transition monitors to alter selection in the 
case that the selected signal does not contain bit level transitions while the 
non-selected signal does. 

The invention allows immediate detection of a failure condition and to switch 
over in a hitless manner at the time of detection of a failure. This greatly 
facilitates maintenance because there is no need anymore to initiate the 
protection switch earlier in time in order to avoid a traffic hit. 

Brief Description of the Drawings 

Preferred embodiments of the present invention will now be described with 
reference to the accompanying drawings in which 
figure 1 shows a block diagram of a network element- 
figure 2 shows a block diagram of a second embodiment of a network 

element according to the invention; and 
figure 3 shows a state diagram for the selector according to the invention. 

Detailed Description of the Invention 

Network elements typically have equipment protection installed, which means 
that certain core processing units such as for example a switch matrix is 
provided in duplicate so that the second redundant processing units can take 
over operation if the first active processing unit fails. Internally, the network 
element has thus two redundant signal paths, one leading over active matrix 
copy A and one over redundant matrix copy B. The signal that is protected that 
way, is copied to either of the two signal paths, so that the paths carry 
identical signals. At the output side, however, the better of the two signals is 
selected for output. As explained above, in today's network elements the 
switch-over from active to redundant signal path is either not hitless or 
requires a large frame buffer. 

The components in a network element that are involved in the selection 
according to the invention are shown in a first embodiment in figure 1 . The 
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network element has an equipment clock CL, two redundant signal paths PI , 
P2 and a switch SW selecting one of the two for output O. Each signal path is 
fed to an amplifier Al , A2, respectively clocked by clock CL, which leads to a 
delay line Dl , D2. The amplified signal is also fed to a transition monitor Tl , 
T2. The output of the transition monitor is coupled to a selector C, which 
controls the operation of the switch SW. 

The working principle of the circuit according to the invention is simple: 
Transition monitors Tl, T2 are provided on each data signal copy PI, P2. All 
the circuits are synchronously clocked by the system clock CL and the data 
signal copies are frame aligned. The copy which does not show any transition 
on a sliding block of N bits is assumed to be faulty. Between the monitor Tl , 
T2 and the hitless switch SW there are delay elements Dl , D2 in the data 
signal stream with transmission delay equivalent to N bits at least. N bit period 
is the time needed to detect a loss of signal condition and operate the hitless 
switch. 

The delay line can be implemented by a simple shift register of N bit depth 
clocked by the system clock or by any other delaying component, including for 
example a FIFO (first-in-first-out buffer) or a cable or wave guide delay line 
with appropriate length so that the total propagation delay equals N bits. The 
amplifiers Al, A2 are optional and may be discarded if not needed. 

The transition monitors are clocked by system clock CL and detect bit level 
transitions, i.e., whether the signal level changes from high to low or vice 
versa from one clock pulse to the next. If no such bit level transitions occur in 
the input signal, the latter is assumed to be faulty. If at the same time, the 
other signal shows transitions, the selector C triggers a switch-over from the 
alleged faulty signal to the one still showing transitions, provided that the 
former was selected before. 
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The signal copies are selected according to table 1 below: 
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Table 1 : Selection criteria for copy A/B 



If for example signal copy A was selected and signal copies A and B show 
transitions and are thus assumed to be all right, then signal copy A remains 
selected (line 1). If signal copy A was selected and A is found to be faulty 
(NOK) but B appears to be all right, selection will be reverted from signal A to 
signal B (line 3). However, if both signal copies are found to be faulty, then no 
switch-over is initiated (lines 7 and 8). 

If the data signal consists of a long sequence of identical digits then the both 
transition monitors qualify either copy as being NOK, but according to the 
table above no copy switch is initiated. However, if in such case copy A fails 
there may be a transition to the low level which would initiate a switch over to 
the failed copy. In order to avoid this, the signal state can be used in this 
particular situation as an additional criterion. Thus if both signals do not 
shows transients, a copy is OK if the signal state is „active // otherwise it is 
NOK. 

In the first embodiment, however, a problem may occur if the failed copy of 
the data signal toggles between two signal states. In this case, the proposed 
mechanism will fail. Thus, in a second improved embodiment, the selection is 
made more robust against such failure by allowing transition based selection 
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only if the data signal itself is found to be valid, e.g., by presence of a frame 
pattern. A second monitor is therefore added, which searches for significant 
signal parts in the signals and enables transition-based selection only, if such 
significant signal part is found. This second criterion is given the higher 
priority. 

The circuit according to the second embodiment is shown in figure 2. It 
contains all circuit components from figure 1 and in addition first and second 
frame monitors Fl, F2 linked to the first and second signal paths PI, P2, 
respectively. The two frame monitors lead to a first selector SI , which controls 
the switch SW with first priority, i.e., only if a signal is found to be valid, it can 
be selected for output. The transition monitors Tl, T2 lead to a second selector 
S2, which controls the switch SW in the way described above, but with the 
above restriction that switch-over is only enabled if the selected signal is found 
to be valid by the corresponding frame monitor. If the first selector finds one 
signal valid and the other invalid, it switched to the valid one, irrespective what 
the second selector results. The second selector S2 has thus a second priority 
lower than the first priority of the first selector SI . 

The selection criteria for a priority 1 selection based on significant signal parts 
(e. g. framing) is shown in table 2 below. 
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Table 2: Priority 1 selection criteria using frame monitor 



113 914 



8 

Only if both signal copies appear to be valid by the frame monitor, priority 2 
selection based on the transition monitors is enabled according to table 3 
below. 
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Table 3: Priority 2 selection criteria using transition monitor 

However, toggling of a failed signal can normally also be avoided by the use 
of suitable pull-down or pull-up circuits at preceding data signal driver output 
or receiver input circuits. 

When one data signal breaks, a hit in the failed signal may occur, which 
causes an extra transition, e.g. from high level to low level. Such a hit should 
not cause the system to switch to the failed signal. In another preferred 
improvement of the invention, a timer is thus provided and switch-over is only 
initiated if the failure condition in the currently selected signal persists after a 
timeout. This improvement makes the selection also robust against some 
signal toggling before the loss condition is reached. 

Figure 3 shows a state diagram of this third embodiment. After the start of the 
system, it is in a monitoring state ST1 . If the monitor detects as condition CI 
an inconsistency between copies A and B data signals, the second state ST2 is 
reached after M bits. In the state ST2, the system is loaded to switch 
immediately to that signal copy which shows the first bit transition (i.e., second 
condition C2). Switch over is shown as signal state ST3. After switch-over, the 
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system goes back to the state ST1 again (condition C3). If not switch-over 
occurs for a predefined time interval (i.e., condition C4), the system goes back 
to the state ST1 , as well. The timeout period may be selected according to 
known signal characteristics, e.g. the expected bit transitions associated with 
the frame alignment word, or according to signal statistics, e.g., the largest 
possible number of CID (Consecutive Identical Digits) to be supported. 

While the selection mechanism has been described with respect to equipment 
protection switching, it should be noted that it is equally applicable to other 
type of protection, i.e., path protection or section protection. 
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